Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File:                     eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier:          IiRW3nPs20OlIC7aN5M2KU0ZBpSNlaihY2PyN2bqYcU=
Subject key identifier:   13:E7:D7:74:FB:20:AB:C6:E6:EF:A2:37:81:83:EA:B1:DF:F2:7C:96
Certificate issuer:       /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial:       010D0C9F4328584B72C1EBB67DF92058D0BC8440
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     401021
IP address blocks:        23.176.152.0/24 maxlen: 24
                          2620:0:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:eb:b6:7d:f9:20:58:d0:bc:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=9519fcba-46ec-4570-8eac-0935c1e89d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:d0:c0:14:88:68:69:4e:a3:72:17:22:96:
                    89:30:42:cd:8c:c5:b1:48:1b:48:c6:a8:5c:83:89:
                    d4:92:99:40:b5:93:0a:95:c6:9f:ac:43:20:5d:78:
                    97:97:d9:23:04:45:2f:84:db:ce:8e:2e:d7:eb:06:
                    ea:e1:2d:d3:21:58:9c:34:d4:19:28:82:6b:a2:72:
                    16:f2:41:4b:13:dd:9c:a3:d5:ae:50:71:31:13:46:
                    da:b3:98:b0:21:52:21:e8:ca:ac:57:71:21:81:ae:
                    24:75:1c:25:fb:4e:e8:dc:39:ae:a5:5c:36:ea:fa:
                    c7:20:f0:95:d4:2c:e5:46:73:68:0e:1f:c4:83:6d:
                    d6:af:a0:5a:74:04:05:af:4e:85:53:80:23:75:64:
                    45:ce:41:7a:8c:c1:4d:23:3b:11:0e:1f:ce:eb:37:
                    09:8e:b8:43:2e:4c:52:a2:39:df:06:e7:9e:d7:a3:
                    aa:64:e6:a2:ed:f8:ba:97:09:fe:14:4a:6d:74:e0:
                    76:e7:f1:ba:95:34:c3:8a:de:fa:df:99:24:32:72:
                    02:22:ca:3c:a6:22:30:b9:b8:4d:bb:1d:b1:33:ed:
                    c5:60:86:e5:f9:0c:a5:a2:f6:06:71:b9:1e:a2:22:
                    b4:4c:fd:07:e2:85:7c:94:53:18:87:3c:9e:bc:4d:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:D7:74:FB:20:AB:C6:E6:EF:A2:37:81:83:EA:B1:DF:F2:7C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl

            X509v3 Authority Key Identifier:
                keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.152.0/24
                IPv6:
                  2620:0:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:0f:37:44:2b:0f:d0:eb:f0:a4:26:b4:72:2f:9f:9f:06:
         f1:2e:9c:98:e2:6b:72:7f:0a:f1:af:79:14:dc:b6:f7:5d:96:
         d2:2e:ee:9f:75:49:a2:13:53:76:23:8c:3c:39:5d:ea:9d:bd:
         20:60:19:63:a9:08:e2:42:58:39:c6:f0:7e:68:06:9b:a3:1d:
         78:9b:bf:29:35:6b:f1:24:d2:da:91:04:86:c5:f2:75:d7:a5:
         89:49:ee:37:b3:9e:eb:ab:67:07:35:d1:e9:e4:36:46:69:36:
         b6:a4:47:fc:86:15:89:44:06:8e:b8:1c:cc:53:4f:ea:98:9e:
         c1:87:85:c9:67:7b:95:7a:36:49:10:af:a9:19:80:8e:27:7c:
         ac:cf:61:35:f1:ef:b4:31:46:6e:96:be:1e:70:e4:dc:aa:43:
         a3:5c:39:de:42:f5:d1:aa:ec:b1:fe:7b:aa:7f:2a:30:0a:33:
         32:df:03:f8:60:11:21:8a:b3:07:ad:18:e7:9f:2b:01:d1:a6:
         c9:f7:7a:7e:f2:a7:ef:aa:f0:6a:7c:58:5b:23:88:41:df:c9:
         63:81:90:7e:aa:20:50:a6:6b:d1:4f:66:84:74:79:03:a8:c4:
         75:20:da:9a:9f:06:ee:38:5c:43:f4:11:2f:ba:0c:ca:75:bb:
         dc:1f:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:38:46 2025 by rpki-client